diff --git a/[refs] b/[refs]
index 321e3133b0c6..e6b985b9b2b4 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: ee2e6114de3bdb1c34f3910b690f990483e981ab
+refs/heads/master: d9a9dc66eb8a8fd85c8546247e7e1d6023d0eb0f
diff --git a/trunk/net/ipv6/mip6.c b/trunk/net/ipv6/mip6.c
index 2794b6002836..d6e9599d0705 100644
--- a/trunk/net/ipv6/mip6.c
+++ b/trunk/net/ipv6/mip6.c
@@ -347,11 +347,12 @@ static const struct xfrm_type mip6_destopt_type =
 
 static int mip6_rthdr_input(struct xfrm_state *x, struct sk_buff *skb)
 {
+	struct ipv6hdr *iph = ipv6_hdr(skb);
 	struct rt2_hdr *rt2 = (struct rt2_hdr *)skb->data;
 	int err = rt2->rt_hdr.nexthdr;
 
 	spin_lock(&x->lock);
-	if (!ipv6_addr_equal(&rt2->addr, (struct in6_addr *)x->coaddr) &&
+	if (!ipv6_addr_equal(&iph->daddr, (struct in6_addr *)x->coaddr) &&
 	    !ipv6_addr_any((struct in6_addr *)x->coaddr))
 		err = -ENOENT;
 	spin_unlock(&x->lock);